As a result of the inspections, the OAIC made recommendations to Vodafone, Optus and iiNet, which were accepted in full. The OAIC did not issue any recommendations to Telstra as it fully complied with its record keeping obligations.

In 2017, the OAIC followed up the implementation of our recommendations with the following outcomes:

Vodafone advised that it has changed business processes to comply with its record keeping obligations.

Optus provided OAIC with evidence to demonstrate that it has implemented OAIC’s recommendations.

iiNet was subject to a follow-up inspection of its Telecommunications Act record-keeping activities in November 2016. This was due to concerns identified in the 2015 assessment in relation to iiNet’s maintenance of these records. The subsequent inspection found that iiNet is meeting its record keeping obligations for records of disclosures under the Telecommunications Act. This inspection was finalised in February 2017.